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PREFACE 

This  Project  RAND  Memorandum  is  part  of  a  long-term  study  of  main¬ 
tenance  policies  and  their  effect  on  Air  Force  capabilities  and  costs. 

It  specifically  examines  the  interactions  between  planned  replacement  -- 
a  form  of  preventive  maintenance  --  and  the  factors  of  reliability, 
availability,  and  cost. 

The  study  was  initiated  when  it  became  apparent  that  better  appli¬ 
cation  of  the  principles  of  planned  replacement  could  result  in  worthwhile 
reductions  in  maintenance  cost  and  weapon- system  downtime. 

This  Memorandum  Is  an  abbreviated  version  of  M.  Kamins  and 
J.  J.  McCall,  Jr.,  Rules  for  Planned  Replacement  of  Aircraft  and  Missile 
Parts,  The  RAND  Corporation,  Research  Memorandum  RM-2810-PR,  November 
1961.  It  was  condensed  for  presentation  as  a  briefing  during  January  and 
February,  1962,  to  interested  groups  at  SBAMA,  Ballistic  Systems  Division, 
First  Missile  Division,  the  Directorate  of  Maintenance  at  Hq  USAF,  Air 
Force  Logistics  Command,  and  a  small  number  of  groups  outside  the  Air 
Force. 

A  related  work  which  the  reader  may  also  find  useful  is  M.  Kamins, 
Determining  Checkout  Intervals  for  Systems  Subject  to  Random  Failures, 

The  RAND  Corporation,  Research  Memorandum  RM-2578,  June  15,  i960. 


SUMMARY* 

The  appropriate  replacement  policy  for  a  part  depends  on  its  failure- 
characteristics  and  the  relative  costs  of  an  in-service  failure  and  of  a 
planned  replacement  ( replacement  before  failure ) .  For  planned  replacement 
to  be  worthwhile ,  the  part  must  display  a  wearout  characteristic  (a  failure 
rate  increasing  with  time);  and  the  cost  of  an  in-service  failure  must  be 
greater  than  the  cost  of  a  planned  replacement. 

Failure-data  analysis  has  shown  that  many  aircraft  and  missile  parts 
fail  exponentially;  that  is,  they  have  a  constant  failure  rate.  In  these 
cases,  a  new  part  is  no  better  than  a  used  but  serviceable  part  of  any 
age.  The  optimum  replacement  policy  for  these  parts  --  optimum  in  the 
sense  of  minimizing  expected  cost  per  unit  time  --  is  a  simple  one:  Never 
plan  to  replace  before  failure,  regardless  of  how  expensive  or  inconvenient 
an  in-service  failure  becomes. 

On  the  other  hand,  analysis  of  failure  data  has  also  uncovered  many 
parts  with  non- exponential  failure  characteristics.  Substantial  numbers  of 
these  parts  exhibit  an  increasing  failure  rate  over  time.  In  this  situation 
the  age  at  which  the  part  should  be  replaced  depends  on  the  relative  cost 
of  an  in-service  failure.  In  general,  for  a  given  aging  effect,  the  higher 
the  relative  cost  of  an  in-service  failure,  the  shorter  should  be  the 
planned- replacement  interval.  Similarly,  for  a  given  in-service  failure 
cost,  the  more  severe  the  aging  effect  the  shorter  the  replacement  interval. 

In  this  study,  specific  replacement  policies  were  obtained  for  parts 
which  fail  according  to  one  of  four  continuous  probability  distributions. 


*This  Research  Memorandum  is  an  abbreviated  version  of  M.  Kamins  and 
J.  J.  McCall,  Jr.,  Rules  for  Planned  Replacement  of  Aircraft  and  Missile 
Parts,  The  RAND  Corporation,  Research  Memorandum  RM-2810-PR^- November ,  1961. 
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An  analysis  of  commercial- airline  and  Air  Force  failure  data  indicates 
that  the  times -of- failure  of  many  aircraft  parts  fit  one  of  these 
distributions. 

Replacement  policies  based  on  discrete  probability  distributions  were 
also  examined.  A  computational  routine  was  developed  to  determine  the 
optimum  planned- replacement  interval  for  parts  whose  failure  characteristics 
are  best  described  by  these  discrete  distributions. 
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PLANNED  REPLACEMENT 


The  notion  of  planned  replacement,  or  replacement  of  an  item  before 
it  fails,  is  undoubtedly  familiar  to  you.  Replacement  or  overhaul  at  some 
specific  age  is  mandatory  for  a  vide  variety  of  aircraft  parts,  notably 
engines  and  engine  accessories.  You  may  have  other  names  for  it  --  scheduled 
maintenance,  preventive  maintenance,  and  the  like.  You  are  also  very  much 
aware  of  two  of  the  objectives  of  such  a  policy:  namely,  safety  and  reli¬ 
ability.  But  if  planned  replacement  can  help  achieve  these  desirable 
qualities,  it  can  also  save  time  and  contribute  to  improved  in- commission 
rates,  lover  costs,  or  some  combination  of  these.  The  objective  of  this 
study  was  to  learn  some  of  the  characteristics  of  this  tool,  planned 
replacement,  in  order  to  discover  the  factors  that  determine  when  and  how 
it  should  be  used  for  the  most  desirable  results. 

In  reporting  to  you  briefly  on  the  results  of  this  research,  I'll  first 
discuss  the  two  conditions  that  are  necessary  before  planned  replacement  is 
at  least  potentially  worthwhile.  Then  I’ll  consider  these  two  conditions 
further,  to  show  how  likely  they  are  to  occur  in  practice,  and  how  to  quan¬ 
tify  them.  Next,  I'll  describe  a  sort  of  all-purpose  goal  that  should  allow 
you  to  use  a  single  method  to  give  you  just  the  emphasis  you  want,  whether 
it's  reliability,  cost,  or  any  combination.  Before  winding  up,  I’ll  talk 
about  some  of  the  difficulties  you  might  run  into  when  you  try  to  use  these 
analytical  tools. 

Nov,  what  are  the  two  conditions  that  are  necessary  to  make  planned 
replacement  worthwhile? 

First,  there  must  be  some  advantage  to  avoiding  an  unexpected  failure 
or  a  failure  in  service.  The  planned  or  scheduled  replacement  of  a  unit. 


be  it  a  system,  subsystem,  component,  or  almost  anythinc  else,  must  "cost" 
less,  in  some  sense,  than  an  emergency,  or  unexpected,  or  unscheduled 
replacement .  This  is  intuitively  reasonable;  if  you  make  a  planned  replace¬ 
ment  when  there  is  no  advantage  in  avoiding  a  failure,  you  throw  away  some 
unused  life  and  get  nothing  in  return. 

The  second  condition  is  less  intuitive  and  generally  less  easy  to 
understand.  Planned  replacement  must  reduce  the  chance  that  a  failure  will 
occur.  The  new  part  must  be  better,  or  more  reliable,  than  the  part  being 
replaced.  In  order  for  this  to  be  so,  the  part  in  question  must  display 
a  vearout  characteristic.  Of  course,  we  all  know  that  most  things  wear 
out  eventually;  that's  not  what  I  mean.  By  vearout,  I  mean  an  increasing 
failure  rate  or  a  decreasing  reliability  with  the  passage  of  time.  The 
failure  rate  is  defined  as  the  probability  that  a  unit  which  is  good  at 
some  specific  point  in  time  will  fail  before  one  additional  unit  of  time 
has  elapsed.  Notice  that  this  is  just  the  opposite  of  the  reliability, 
since  reliability  is  the  probability  that  the  unit  will  survive  the  next 
time  period.  So  our  second  condition  is  equivalent  to  a  decreasing  reli¬ 
ability. 

Figure  1  is  a  plot  made  from  actual  field  experience,  showing  the 
failure  rate  as  a  function  of  time  since  major  overhaul  for  an  engine 
accessory  used  by  one  of  the  major  airlines.  We  call  this  a  bathtub  curve, 
for  obvious  reasons.  Notice  that  during  the  first  600  hours  of  operation, 
the  failure  rate  decreases  by  about  half  --  a  phenomenon  commonly  called 
"infant  mortality"  or  "burn-in”  in  reliability  circles.  During  the  next 
800  hours  of  operation,  the  failure  rate  is  essentially  constant;  failures 
here  are  usually  referred  to  as  "random,”  and  are  the  ones  most  commonly 


FAILURE  HISTORY  OF  ENGINE  ACCESSORY 


assumed  in  reliability  studies.  They  have  also  been  called  "exponential,” 


"chance,"  "accidental,"  or  "Poisson"  failures.*  After  the  lJ*  _ O-hour  nark, 
the  failure  rate  starts  increasing  again,  and  ve  call  this  the  "wearout 
region. " 

Nov  let's  consider  using  planned  replacement  at  $00  hours  for  this 
accessory.  The  nev  one  ve  install  will  have  about  a  20-per~cent  chance  of 
failure  during  the  first  100  hours  of  operation.  But  if  ve  had  left  the 
500-hour  survivor  alone,  it  would  only  be  half  as  likely  to  fail  in  the 
next  100  hours.  Obviously,  planned  replacement  is  extremely  undesirable 
at  this  particular  time. 

Nov  suppose  we  consider  planned  replacement  at  1000  hours.  The  same 
thing  happens.  Suppose  further  that  we  get  rid  of  the  burn-in  phenomenon 
by  improving  environmental  testing  and  quality  control  procedures,  so  that 
our  curve  flattens  out  at  the  left  end  (Fig.  2).  The  thousand- hour  part  is 
still  no  more  likely  to  fail  in  the  next  100  hours  than  is  the  nev  one.  If 
ve  used  planned  replacement  here,  ve'd  be  throwing  away  a  substantial  amount 
of  unused  life,  and  getting  nothing  in  return.  Planned  replacement  is  not 
warranted  when  random  failures  are  involved,  meaning  specifically  a  constant 
failure  rate;  but  unfortunately,  this  is  a  fairly  common  practice  today, 
both  in  the  Air  Force  and  in  commercial  aviation. 

By  now  it  should  be  evident  that  as  time  passes,  and  we  move  to  the 
right  on  this  diagram,  we'll  soon  find  a  place  where  planned  replacement 
may  be  worthwhile,  but  it  can't  happen  before  we  get  to  the  wearout  region, 
where  the  failure  rate  is  increasing.  Later,  we'll  see  it's  at  least  15^0 
hours,  and  is  usually  even  more. 

*See  M.  Kami  ns,  Determining  Checkout  Intervals  for  Systems  Subject  to 
Random  Failures,  The  RAND  Corporation,  Resesr dildemorandim  RM-2578, 

June- 15,  I960. 
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for  a  i*ai  LUi'*--ir>s*‘rvi  .  Tn».*n  ve  .-an  forego  cone  useful  :  i i\  and  ret  in 
re-tarr:  a  r**du  *ed  ;  ro:  a:,i  :  1 V.  of  corns  thine  undesirable  happening.  When  we 
quant  if;.  t:.ic  trad- -off,  ve  *an  get  the  most  cut  of  planned  replacement . 

Hjv  important  is  a  failure- in-service?  Keeping  in  mind  the  increasing 
failure  rat'.  ,  itfc  •.  vident  that  the  more  important  a  failure  is,  the  earlier 
Vv *  11  want  to  :na/c-  a  i  ..aimed  replacement.  This  means  that  if  ve  over¬ 
estimate  its  impertan  ,  ve*ll  replace  too  early,  and  if  we  underestimate, 
we’ll  replace  toe  late  for  best  results.  In  some  cases,  an  explicit  esti¬ 
mate  of  the-  'ost  of  a  failure-in-service  may  be  inappropriate  or  totally 
unavailable.  This  is  generally  true  when  a  failure- in- service  would  degrade 
flight  safety  and  endanger  human  life.  This  means  that  safety- of- flight 
items  in  aircraft  carrying  humans,  either  as  crew  or  passengers,  are  poor 
candidates  for  application  of  certain  of  the  rules  developed  here,  though 
not  all  of  them. 

However,  with  the  current  emphasis  on  extensive  and  thorough  redundancy 
in  vital  systems  for  both  military  and  commercial  aircraft,  situations  domin¬ 
ated  by  flight-safety  considerations  rarely  occur.  Ordinarily  the  failure 
of  an  aircraft  part  causes  nothing  worse  than  a  delayed  flight,  an  unfulfilled 
mission,  an  expedited  repair  action,  or  comparable  occurrences  whose  impor¬ 
tance  can  usually  be  defined  quantitatively.  In  an  unmanned  aircraft  or 
missile,  where  redundancy  is  the  exception  rather  than  the  rule,  the  potential 
loss  of  the  flight  vehicle  or  support  equipment  (or  both)  may  be  real  pos¬ 
sibilities  whose  costs  should  be  weighed  in  any  rep la cement -policy  action. 

In  the  absence  of  safety  considerations  for  flight  personnel  or  the 
catastrophic-damage  potential,  the  cost  of  a  replacement  action,  scheduled 


or  unscheduled,  depends  or:  (l)  the  tine  during  which  the  air /raft  or  rissile 
is  cut  of  .•emmissio:;,  either  awaiting  a  replacement  action  cr  having  the 
a.-cicr:  performed;  and  (h)  the  resources  required  to  acccirpli  ch  the  replace¬ 
ment  a ‘tion.  Let  us  examine  each  cf  these  in  turn,  noting  the  relation 
between  a  scheduled  and  unscheduled  action. 

The  total  elapsed  tine  between  the  demand  for  a  replacement  action  and. 
its  completion  is  a  period  of  no  operational  capability.  The  value  of  this 
downtime  is  the  value  of  the  operational  availability  which  woulu  have 
existed  had  no  replacement  action  been  required.  There  are  several  reasons 
for  expecting  this  loss  of  value  to  be  higher  for  an  unscheduled  replacement 
than  for  a  scheduled  one.  Because  of  the  unexpectedness  of  an  unscheduled 
replacement,  the  reaction  to  a  demand  for  service  is  seldom  immediate.  On 
the  contrary,  long  periods  are  frequently  spent  awaiting  service.  On  the 
other  hand,  by  the  very  nature  of  a  scheduled  replacement,  this  waiting 
time  can  be  reduced  substantially,  and  the  system  is  typically  available 
right  up  to  the  time  work  actually  begins.  Another  reason  for  expecting 
unscheduled  downtime  to  last  longer  is  that  the  actual  replacement  time  is 
often  greater  for  an  in-service  failure  than  for  a  planned  replacement.  Not 
only  is  it  sometimes  more  difficult  to  replace  a  failed  part  than  to  replace 
an  unf ailed  one,  but  the  failure  of  one  part  frequently  causes  damage  to 
other  parts.  Then  too,  it  may  take  some  time  to  diagnose  location  of  the 
failure.  Finally,  the  value  per  unit  time  of  the  lost  capability  during  an 
unscheduled  action  often  exceeds  the  same  measure  for  a  scheduled  action. 

For  example,  if  an  unexpected  defect  turns  up  in  an  aircraft  or  missile  on 
an  alert  commitment,  finding  a  substitute  in  a  hurry  may  mess  up  somebody's 
schedule  for  maintenance  or  training. 


The  second  factor  Jiffecti  li/1:  Uu-  cost  of  a  replacement  iti’Uoti  it;  the 
:unouiit  of  resources  required  to  perform  the  net. ion.  Usually  more  resources 
will  he  needed  for  an  unscheduled  rep .Lucement ,  for  lliree  reasons:  (l)  The 
replacement  of  a  foiled  part,  is  usually  a  more  complex  uperuUon  than  i  s  a 
planned  r  •  ’placement  ,  and  the  salvage  value  of  a  failed  part,  may  he  considerably 
leer,  than  that  of  an  unfuiled  part.  (.')  Additional  resources  may  he  needed 
to  repair  parte  whose  damage  was  induced  by  the  In-service  failure. 

(3)  Finally,  when  a  replacement  is  unscheduled,  it.  is  often  necessary  to 
transport  mai  intenonce  resources  to  the  l'ai  led  system  instead  of  brlnpinp 
tlr‘  system  to  the  jvsoiuver..  A  planned  replacement  avoids  the  hi  ph  cost  of 
these*  expedi tod  ae ti oils . 

For  these  reasons  we  should  expect  it  to  cost  more  to  repair  jui  in-service 
failure  than  to  tnake  a  planned  replacement,  under  the  most  penoral  circum¬ 
stances  of  both  military  and  commercial,  operations. 

But  no  matter  how  detrimental  a  failure  in  service  may  he,  planned 
replacement,  offers  no  help  unless  the  part  in  question  has  an  increasing 
failure  rate.  How  can  you  toll  if  it  has?  In  principle,  it  isn't  very 
difficult  to  use  what's  called  the  actuarial  method,  the  same  thin*1;  life 
insurance  actuaries  use  to  quantify  human  mortality.  You  need  failure  data  -- 
information  on  which  parts  failed,  and  at  what  ape.  Then,  to  pet  the 
failure  rate  for  a  pi  von  interval,,  you  need  only  divide  the  number  of  failures 
which  occurred  in  the  interval  by  the  number  of  parts  which  operated  in 
the  Interval.  For  example  (Fip.  j),  the  enpine  accessory  1  mentioned  pre¬ 
viously  had  a  total  of  IS  fai  limes  in  the  intorvul  between  000  jukI  100 
f lylnp- hours ,  while  the  number  operating  in  the  interval  wus  friiis 


latter  quantity  isn't  a  whole  number,  because  a  part  which  l'ai  Led  halfway 
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through  the  interval,  let  us  say,  contributes  only  that  particular  fraction 
to  the  total.  We  find  that  the  failure  rate  of  this  part  in  the  interval 
from  200  to  300  flying- hours  is  0.145*  This  method  of  computation  is 
explained  in  considerable  detail  in  Air  Force  Technical  Order  T.O.  00-25-128, 
"Procedures  for  Determining  Aircraft  Engine  Failure  Rates,  Actuarial  Engine 
Life,  and  Forecasting  Monthly  Engine  Changes  by  the  Actuarial  Method." 

This  T.O.  also  contains  sixty  pages  of  tabulated  failure  rates  which  cover 
every  engine  used  by  the  Air  Force.  Similar  tables  are  available  for  propellers. 

To  get  some  information  on  the  failure  characteristics  of  aircraft 
parts  other  than  engines  and  propellers^  ve  vent  to  the  commercial  airlines, 
which  apply  the  actuarial  method  to  hundreds  of  parts.  We  also  studied 
several  reports  concerning  failure  experience,  including  the  granddaddy  of 
them  all,  a  study  done  at  RAND  ten  years  ago  by  D.  J.  Davis.* 

As  ve  expected,  ve  found  some  things  which  were  very  interesting  from 
the  standpoint  of  planned  replacement.  For  example,  when  we  tried  to 
categorize  the  failure  characteristics,  the  largest  single  category  was  a 
familiar  one  --  the  random  distribution  of  failures.  This  distribution 
seems  to  represent  the  failure  pattern  of  a  wide  variety  of  devices,  pri¬ 
marily  electronic,  but  including  some  mechanical  and  electromechanical  ones 
as  well.  This  is  extremely  significant  relative  to  planned  replacement.  A 
random  distribution  means  a  constant  failure  rate,  and  as  we  just  saw,  a  part 
with  this  characteristic  should  not  be  replaced  before  failure. 

We  found  another,  and  somewhat  smaller,  group  of  parts  whose  failure 
characteristics  could  be  described  by  some  of  the  better-known  probability 
distributions  of  mathematical  statistics.  One  example  (Fig.  1+)  is  an  engine 
whose  failures  have  what's  called  a  Normal  distribution,  one  which  occurs 

*D.  J.  Davis,  "An  Analysis  of  Some  Failure  Data,"  J.  Amer.  Stat.  Ass., 

Vol.  47,  No.  258,  June,  1952,  pp.  113-15°*  Or  see  idem.  The  RAND  Corporation, 
Paper  P-I83,  February  12,  1952. 
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frequently  in  nature.  This  is  a  Normal  probability  grid.  The  vertical 
or  "fraction  failed"  axis  in  Fig.  4  is  divided  so  that  the  time- failure 
history  for  a  part  with  a  Normal  distribution  of  failures  is  a  straight 
line  under  most  circumstances.  This  distribution  is  pertinent  to  planned 
replacement,  since  it  has  an  increasing  failure  rate. 

In  Fig.  5  we  have  a  propeller  whose  failures  follow  a  Weibull  distri¬ 
bution,  named  after  the  Swedish  university  professor  who  first  suggested 
its  usefulness  in  reliability  work.  As  you  may  have  guessed,  this  is  called 
a  Weibull  Probability  Grid.  Both  the  vertical  and  horizontal  scales  on 
this  chart  are  special.  The  random  distribution  is  a  member  of  this  family, 
as  shown  by  the  upper  line,  and  it  also  defines  an  interesting  boundary  for 
us.  A  failure- versus -time  plot  which  is  steeper  than  this  has  an  increasing 
failure  rate,  like  the  propeller  example.  If  itrs  less  steep,  the  failure 
rate  is  decreasing. 

In  all,  we  found  five  types  of  so-called  "continuous"  distributions  in 
our  failure  analyses.  But  even  these  five  types  did  not  cover  all  the  parts 
we  studied.  Some  could  be  described  only  by  so-called  "discrete"  distri¬ 
butions,  involving  point-by-point  or  tabular  representation  of  the  failure 
rate;  an  example  of  this  is  the  "bathtub"  curve  you  saw  earlier.  Many  of 
these  had  an  increasing  failure  rate  during  at  least  part  of  their  life 
history.  No  one  particular  distribution  could  describe  the  failures  of 
any  large  class  of  parts,  except  for  electronics,  where  random  failures 
are  all  but  universal. 

In  short,  the  failure  analyses  showed  that  while  not  all  parts  have  an 
increasing  failure  rate,  enough  of  them  do  to  make  planned  replacement 
potentially  worthwhile  in  many  instances. 
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Now  why  only  "potentially"  worthwhile?  Earlier,  I  mentioned  that 
getting  the  most  out  of  planned  replacement  involves  a  tradeoff  or  compromise 
between  the  amount  of  useful  service  life  we  give  up,  and  the  reduced 
probability  of  a  failure  in  service.  Since  it's  always  possible  to  give 
up  more  than  we  gain,  we  need  some  insurance  against  this  happening. 

The  next  step  in  the  research  study  was  to  decide  what  was  a  desirable 
goal:  how  do  you  tell  a  good  application  of  planned  replacement  from  a 
bad  one? 

What  are  some  plausible  objectives  for  planned  replacement  generally? 
Minimum  cost  might  be  pretty  attractive  to  a  taxicab  fleet  operator,  or  even 
a  commercial  airline  under  special  conditions.  Reliability  or  safety  might 
be  appropriate  in  certain  other  cases.  In  the  military,  cost-effectiveness  -- 
that  is,  the  cost  per  ready  weapon  —  is  often  used  as  a  measure  of  perfor¬ 
mance,  though  it  isn't  always  the  best  one.  As  you  can  see,  these  objectives 
are  generally  incompatible  with  one  another,  and  we'd  like  to  wind  up  with 
some  sort  of  versatile  procedure  which  could  be  tailored  to  each  of  these 
and  perhaps  some  others. 

Two  steps  are  required  to  achieve  this  versatility.  The  first  is  to 
express  the  various  effects  of  failure  and  replacement  in  terms  of  a 
common  quantity  —  dollars,  for  example.  In  the  Air  Force  it  is  sometimes 
difficult  to  do  this  with  any  reasonable  accuracy.  Even  in  other  fields, 
such  as  airline  operations,  the  detailed  procedure  takes  more  time  than  we 
can  devote  to  it  here;  however,  it  can  usually  be  done  with  an  accuracy 
that* s  compatible  with  the  rest  of  the  process.  Figure  6  is  an  example 
from  an  airline  running  an  extensive  overseas  operation. 


COST  OF  AN  ENGINE  FAILURE  OVERSEAS 

TRANSPORTATION  $14,000 

LOSS  OF  REVENUE  5,600 

ADDITIONAL  HANDLING  COST  1,400 


TOTAL 


$21, 000 


Suppose  an  engine  fails;  the  round- trip  supply  flight  alone  with  a 


replacement  engine  costs  about  $l4,uuo.  Passengers  must  sometimes  be 
transferred  to  another  carrier;  if  so,  the  loss  of  revenue  due  to  the  delay 
is  $5,600  (this  assumes  the  transfer  of  4o  passengers  on  one  delay  out  of 
four,  at  a  residual  fare  of  $560).  The  additional  passenger-handling  costs 
(food,  lodging)  for  the  three  out  of  four  delays  not  requiring  transfer  to 
another  carrier  is  about  $1,400,  and  the  total  is  $21,000.  Experience  shows 
(Fig.  7)  that  only  40  per  cent  of  the  failures  occur  overseas,  where  these 
high  costs  hold,  so  that  the  average  added  cost  is  $8,400.  At  a  home  base, 
the  whole  replacement  and  overhaul  process  costs  only  $17,500,  not  much  more 
than  the  transportation  charge  alone  overseas. 

Now  let  me  do  one  more  thing,  using  this  same  example  involving  costs. 
This  is  the  second  step  which  involves  making  the  measure  of  the  penalty 

dimensionless.  We  define  the  penalty  for  a  failure  in  service  as  the  ratio 

«  Extra  cost  of  a  failure- in- service  T  n  ,,  n  , 

of  — ^ — t — 31 - = - t - = - r -  .  In  our  example,  the  normal  replace- 
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ment  and  overhaul  cost  is  $17,500,  so  that  the  dimensionless  penalty  is 
0.48.  The  dimensionless  nature  of  this  quantity  is  the  second  of  the  two 
keys  to  the  versatility  we  want. 

Now  ve  have  all  the  pieces;  let's  put  them  together.  If  we  look  for 
the  minimum- cost  replacement  interval,  we  find  it  has  this  very  simple 
characteristic,  involving  only  four  quantities  (Fig.  8):  failure  rate 
times  mean  life  minus  fraction  failed  equals  one  over  the  dimensionless 
penalty  for  a  failure  in  service. 

To  show  what's  happening  here’s  a  plot  (Fig.  9)  of  cost  per  unit  time 
for  our  old  friend,  Engine  Accessory  "A"  against  the  planned  replacement 
age,  when  the  penalty  for  a  failure  in  service  is  four  —  a  lot  higher  than 
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it  was  for  our  overseas  airline  example .  Our  solution  gives  us  the  minimum- 
cost  point  at  IT  flying-hours .  If  ve  institute  planned  replacement  earlier 
or  later  than  this  age,  *osts  are  higher,  substantially  so  on  the  early 
replacement  side. 

Here's  the  result  (Fig.  1j)  of  a  machine  computation  for  the  same 
example,  shoving  the  best  age  for  planned  replacement  as  a  function  of  the 
penalty  for  a  failure  in  service.  The  point  from  the  previous  chart  is  shown 
as  the  large  dot.  As  the  penalty  increases,  we  replace  earlier.  A  while 
back  I  mentioned  versatility,  and  here’s  an  opportunity  to  show  some  of  it. 

If  our  objective  is  masd-mum  reliability  instead  of  minimum  cost,  we  simply 
make  the  penalty  extremely  severe,  infinite  if  you  wish,  and  find  the  appro¬ 
priate  replacement  age,  in  this  case  15^0  hours. 

Our  results,  then,  consist  primarily  of  a  simple  computing  program  to 
find  the  best  replacement  age  for  parts  with  discrete  failure  distributions, 
and  empirical  charts  or  nomograms  (Fig.  11 ),  to  obtain  the  same  results 
with  one  of  four  continuous  distributions . 

So  far  the  road  has  been  pretty  smooth.  Let’s  look  at  some  of  the 
bumps  (Fig.  12).  I  mentioned  earlier  that  it’s  possible  to  give  away  more 
in  terms  of  unused  service  life  than  we  get  back  in  terms  of  fewer  failures, 
and  the  mathematics  of  the  solution  doesn’t  prevent  this  from  happening. 
Therefore,  we  have  included  in  our  results,  for  both  continuous  and  discrete 
distributions,  a  measure  of  the  savings,  if  any.  These  are  gross  savings, 
however.  One  should  subtract  from  them  the  extra  cost  of  administering  a 
planned- replacement  program,  as  opposed  to  a  replace -at- failure- only  policy. 
An  example  of  such  extra  costs  might  be  increased  data- collection  costs. 


RESULTS  OF  COMPUTING  ROUTINE  FOR 


Fig.  10 


PENALTY  FOR  A  FAILURE  IN  SERVICE 
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CAUTION  AREAS 

•  POTENTIAL  LOSSES 

•  COST  OF  ADMINISTRATION 

®  CONFIDENCE  IN  ESTIMATES 

®  RELIABILITY  GROWTH 

®  DECISION  TO  EXTEND 

®  PHASE-OUT 


Fig.  12 


-24- 

This  next  grou p  is  not  as  easy  to  handle.  Since  the  estimation  of 
failure  rates  is  necessarily  inexact,  some  attention  must  be  given  to  the 
possibility  that  the  failure  characteristics  may  be  somewhat  different  from 
vhat  ve  think  they  are.  As  time  passes,  we  generally  accumulate  more  failure 
experience  and  this  problem  subsides.  However,  a  new  one  comes  along  to  take 
its  place:  this  is  the  growth  in  reliability  which  we  hope  will  accompany 
product- improvement  programs.  A  planned- replacement  program  should  reflect 
the  current  failure-rate  experience.  As  reliability  improves,  the  desirable 
replacement  age  may  move  upward  into  a  region  wher  we  may  have  little  or 
no  failure  experience.  It's  necessary  then  to  exercise  some  caution  in  the 
decision  to  extend  the  mandatory  replacement  age,  and  Research  Memorandum 
RM-2810*,  of  which  the  present  studyr  is  an  abbreviated  version,  gives  consi¬ 
derable  attention  to  this  problem. 

The  rules  for  determining  the  best  time  for  planned  replacement  were 
developed  on  a  long- term- average  basis.  During  phase-out  of  a  system,  a 
somewhat  different  policy  can  be  beneficial,  one  which  has  been  developed 
by  mathematicians  at  Syl vania’s  Electronic  Defense  Laboratories  and  is 
referenced  in  RM-2810-PR. 

Briefly,  the  results  and  conclusions  of  the  study  are  these  (Fig.  13)  • 

In  order  to  be  at  least  potentially  worthwhile,  planned  replacement  has 
two  prerequisites :  an  increasing  failure  rate,  or  vearout  characteristic, 
and  some  penalty  associated  with  a  failure  in  service.  If  either  one  of 
these  is  missing,  the  best  policy  is  replacement  at  failure  only.  A  substan¬ 
tial  number  of  parts  in  Air  Force  Weapon  Systems  fail  to  meet  these  requirements. 

*M.  Kami  ns  and  J.  J.  McCall,  Jr.,  Rules  for  Planned  Replacement  of 
Aircraft  and  Missile  Parts,  The  RAND  Corporation,  Research  Memorandum 
RM- 2610- PR ,  November,  I96I . 
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WORTHWHILE  PLANNED  REPLACEMENT  REQUIRES 

•  INCREASING  FAILURE  RATE  (WEAROUT)  AND 

•  PENALTY  FOR  FAILURE  IN  SERVICE 

REPAIR  OF  A  FAILURE 

•  EXTRA  TIME 

•  EXTRA  RESOURCES 

ANALYSIS  OF  FAILURES 

•  RANDOM;  REPLACE  ONLY  AT  FAILURE 

•  CONTINUOUS  DISTRIBUTIONS;  NOMOGRAM 

•  DISCRETE  DISTRIBUTIONS;  COMPUTING  ROUTINE 

PLANNED  REPLACEMENT  MAY  YIELD  BENEFITS 

•  MISAPPLICATION  CAUSES  NEEDLESS  EXPENSE 


Fig.  13 
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The  repair  of  a  failure  in  service  typically  involves  more  time  and 
resources  than  does  a  planned  replacement.  We  saw  an  example  in  the  case 
of  airline  operations. 

The  analysis  of  failure  characteristics  of  aircraft  parts  shows  that  a 
substantial  number  have  a  constant  failure  rate  --  so-called  random  failures. 
These  parts  should  be  replaced  only  at  failure,  at  least  until  they  show 
some  demonstrable  wearouf  in  later  life.  Another  group  of  parts  has  failure 
characteristics  which  can  be  represented  well  by  some  of  the  continuous 
probability  distributions  of  mathematical  statistics.  We  have  provided 
nomograms  showing  optimum  replacement  policies  for  four  such  families  of 
distributions.  Most  parts  have  failure  characteristics  which  can  be  described 
only  by  discrete,  or  piece-by-piece  distributions.  We  have  developed  a 
computing  routine  for  determining  optimum  policies  for  these  parts.  Many 
parts  in  the  latter  two  categories  do  display  wearout,  and  are  potential 
candidates  for  planned  replacement. 

Planned  replacement  as  a  concept  carries  no  guarantee  of  benefits. 
However,  we  have  developed  tools  which  show  when  and  to  what  extent  gross 
benefits  can  be  expected.  These  should  then  be  weighed  against  the  effort 
and  expense  that  the  management  of  a  planned- replacement  program  entails. 

When  planned  replacement  is  improperly  applied  --  to  parts  with  random 
failures,  for  example  --  it  will  cause  substantial  unnecessary  expenditures 


of  maintenance  manpower,  spare  parts,  and  weapon-system  downtime.  Eliminating 
these  misapplications  can  yield  substantial  payoffs. 


